$ rpki-client -vvf repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft File: 28E2707085C2950AF9267465A3801841D8077215.mft (raw, json) Hash identifier: PCaXA9lCofEN7Js0xURreWyRwcV2AaMnzSaeMzJ9LFE= Subject key identifier: 21:FE:AE:17:D7:97:0F:C9:D1:1C:52:4E:E0:B4:FA:FD:F1:4A:53:78 Authority key identifier: 28:E2:70:70:85:C2:95:0A:F9:26:74:65:A3:80:18:41:D8:07:72:15 Certificate issuer: /CN=28E2707085C2950AF9267465A3801841D8077215 Certificate serial: 438AE0100F15CBC9C566FBFB184164EB011B6426 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft Manifest number: 01CE Signing time: Sat 23 Aug 2025 07:31:02 +0000 Manifest this update: Sat 23 Aug 2025 07:26:02 +0000 Manifest next update: Tue 26 Aug 2025 08:06:02 +0000 Files and hashes: 1: 28E2707085C2950AF9267465A3801841D8077215.crl (hash: e8KLqY4VQjfJhjUpacYWcfMQz6FbCuN4Ch16bhzMNks=) 2: 3130332e3138342e36362e302f32332d3234203d3e20313439363730.roa (hash: BeLsfpL8RzgYNWSnNvLFv9eVxbvW50/eid911Xh0OPs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.crl rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 08:06:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:8a:e0:10:0f:15:cb:c9:c5:66:fb:fb:18:41:64:eb:01:1b:64:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28E2707085C2950AF9267465A3801841D8077215 Validity Not Before: Aug 23 07:26:02 2025 GMT Not After : Aug 26 08:06:02 2025 GMT Subject: CN=21FEAE17D7970FC9D11C524EE0B4FAFDF14A5378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:23:c5:8a:8e:03:25:e8:af:2e:9c:4b:ed:a9: 8a:c7:a5:1b:35:f9:40:9c:4d:97:9d:7b:ab:94:33: 9d:71:77:1e:6d:fe:44:85:ad:5a:d1:69:dc:82:d9: 76:22:68:8e:6d:4a:51:dc:08:0e:cd:07:08:05:71: 59:e7:91:0c:48:48:6f:ff:65:54:62:b3:fb:b5:73: 73:cb:e8:9f:b1:72:b7:a6:68:cd:97:0b:43:6b:0b: 37:f5:d3:de:10:d8:71:8a:76:dd:91:cd:98:ca:97: a2:c8:bd:5b:c8:f6:95:e1:5f:57:db:70:f2:84:53: 6c:f3:f0:1e:cf:20:1b:f0:af:d4:ed:c4:69:93:83: cf:43:24:8f:16:d2:24:8a:25:93:d3:a0:ff:aa:cf: 88:58:02:4a:9a:a6:6c:2b:f2:10:e1:0d:d2:86:e2: fe:02:f2:e1:3a:cb:41:dc:99:dc:3a:8a:11:59:54: 9e:17:f3:89:9c:0c:63:2a:b2:f1:bd:fb:4a:68:28: c3:87:05:f9:f9:ff:cc:8e:aa:d5:90:ca:2b:39:b9: 92:27:48:5b:f9:9c:06:30:77:97:f4:01:df:0f:3c: fb:cf:18:cf:84:6c:8f:6d:2f:b8:25:51:0e:73:55: 6b:e3:66:b9:3b:26:8e:ed:ac:ce:72:1b:06:6f:c7: e5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FE:AE:17:D7:97:0F:C9:D1:1C:52:4E:E0:B4:FA:FD:F1:4A:53:78 X509v3 Authority Key Identifier: keyid:28:E2:70:70:85:C2:95:0A:F9:26:74:65:A3:80:18:41:D8:07:72:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:17:6e:23:95:52:c9:33:ed:83:4f:90:3f:0f:d0:72:c5:e1: 02:bf:98:ba:54:4c:6d:af:7f:28:09:1e:f1:2b:8d:73:7c:8b: e0:a5:2a:44:1e:e9:ad:33:33:48:1f:07:bd:77:96:3b:b3:70: 2d:2f:e7:8b:7b:79:41:93:07:8a:58:e2:57:5d:88:9b:28:73: 0a:ab:f2:cb:41:f3:78:39:5f:49:c3:a8:24:6c:04:c3:14:16: a8:91:37:1e:a7:d4:f3:26:bf:9d:0f:6f:84:40:ae:5f:1d:8c: a1:bd:25:fc:db:86:83:c1:af:e9:49:5a:c0:06:9c:1d:4f:56: ee:db:3f:52:37:35:ef:6b:49:a9:fa:cc:1b:f0:55:01:35:60: be:7d:0b:0b:80:64:3e:50:04:8b:3d:c4:87:a6:21:16:b3:b3: 42:67:27:c9:5e:34:7e:7f:89:c0:5a:27:4a:aa:5b:26:cd:f1: 79:c2:e7:c4:0b:c0:e0:5b:80:62:ac:1a:bc:59:34:0b:1c:fe: 4a:bb:ba:10:23:31:f0:90:5f:bc:a1:ef:40:9e:0b:6a:f5:e2: 13:c4:48:f1:28:03:bc:e3:b6:2c:af:c5:3d:83:f5:a8:9b:56: 9e:44:f4:86:2a:f8:67:68:21:2f:9c:05:8f:99:b9:21:3d:34: c8:56:6e:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ4rgEA8Vy8nFZvv7GEFk6wEbZCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhFMjcwNzA4NUMyOTUwQUY5MjY3NDY1QTM4MDE4NDFE ODA3NzIxNTAeFw0yNTA4MjMwNzI2MDJaFw0yNTA4MjYwODA2MDJaMDMxMTAvBgNV BAMTKDIxRkVBRTE3RDc5NzBGQzlEMTFDNTI0RUUwQjRGQUZERjE0QTUzNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpI8WKjgMl6K8unEvtqYrHpRs1 +UCcTZede6uUM51xdx5t/kSFrVrRadyC2XYiaI5tSlHcCA7NBwgFcVnnkQxISG// ZVRis/u1c3PL6J+xcremaM2XC0NrCzf1094Q2HGKdt2RzZjKl6LIvVvI9pXhX1fb cPKEU2zz8B7PIBvwr9TtxGmTg89DJI8W0iSKJZPToP+qz4hYAkqapmwr8hDhDdKG 4v4C8uE6y0Hcmdw6ihFZVJ4X84mcDGMqsvG9+0poKMOHBfn5/8yOqtWQyis5uZIn SFv5nAYwd5f0Ad8PPPvPGM+EbI9tL7glUQ5zVWvjZrk7Jo7trM5yGwZvx+VpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIf6uF9eXD8nRHFJO4LT6/fFKU3gwHwYDVR0j BBgwFoAUKOJwcIXClQr5JnRlo4AYQdgHchUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDQ2OWVlOS04MTRlLTQ1N2EtYmIxMy1hNWM0YjZmMWI1YWYvMC8yOEUyNzA3MDg1 QzI5NTBBRjkyNjc0NjVBMzgwMTg0MUQ4MDc3MjE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjhFMjcwNzA4NUMyOTUwQUY5MjY3NDY1QTM4MDE4NDFEODA3 NzIxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ0NjllZTktODE0ZS00NTdhLWJi MTMtYTVjNGI2ZjFiNWFmLzAvMjhFMjcwNzA4NUMyOTUwQUY5MjY3NDY1QTM4MDE4 NDFEODA3NzIxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFUXbiOVUskz7YNPkD8P0HLF4QK/mLpUTG2v fygJHvErjXN8i+ClKkQe6a0zM0gfB713ljuzcC0v54t7eUGTB4pY4lddiJsocwqr 8stB83g5X0nDqCRsBMMUFqiRNx6n1PMmv50Pb4RArl8djKG9JfzbhoPBr+lJWsAG nB1PVu7bP1I3Ne9rSan6zBvwVQE1YL59CwuAZD5QBIs9xIemIRazs0JnJ8leNH5/ icBaJ0qqWybN8XnC58QLwOBbgGKsGrxZNAsc/kq7uhAjMfCQX7yh70CeC2r14hPE SPEoA7zjtiyvxT2D9aibVp5E9IYq+GdoIS+cBY+ZuSE9NMhWbsQ= -----END CERTIFICATE-----Generated at Sat Aug 23 10:21:22 2025 by rpki-client